General
- Target 430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383
- Size 2.5MB
- Sample261011-e82veax15m
- SHA256 430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383
- MD5 9fb1845b1ae4ef6f3749b86cf7dc18c5
- SHA1 326869aa58e70696281a266040e38d343e8538d5
- SHA512 f1890b30a25a71606517900c3fe8078f32f0868314498faf16b4983e45e6a06bbd146ee9b8e184066c741c6743b554fcffe1b1b22c66333d032715934d22faa6
- SSDEEP 49152:yeWyuOzclUKtvhib8aJwFJPMKSzTW84vslX2EZwqGLadx58c29G1rv:yeHuFUKtZHaikBB4KtZvdx5e9Yv
- TLSH T15FC533BEAF24DCB7F2213F7C08B55E3179E7291160A443470666722BF0D7A864A1E5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
WinCam.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
WinCam.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383
- Size 2.5MB
- SHA256 430284db85d2f8e072b6a6803afb0f16a34652fe1022fb388233f9904621d383
- MD5 9fb1845b1ae4ef6f3749b86cf7dc18c5
- SHA1 326869aa58e70696281a266040e38d343e8538d5
- SHA512 f1890b30a25a71606517900c3fe8078f32f0868314498faf16b4983e45e6a06bbd146ee9b8e184066c741c6743b554fcffe1b1b22c66333d032715934d22faa6
- SSDEEP 49152:yeWyuOzclUKtvhib8aJwFJPMKSzTW84vslX2EZwqGLadx58c29G1rv:yeHuFUKtZHaikBB4KtZvdx5e9Yv
- TLSH T15FC533BEAF24DCB7F2213F7C08B55E3179E7291160A443470666722BF0D7A864A1E5C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target WinCam.exe
- Size 6.9MB
- SHA256 9400e7e3c3d4a459d13d401822ebc35c254855f4e243b43d102779810ce5abc5
- MD5 5f26fbc36d2f2c8ab6c382e26116daf0
- SHA1 2a2b18de6d268ea6ad8aaa0820feb0ccb059072a
- SHA512 e761b078ef0364920018a7d2062d8aa3799f241b182317015b19fc3edc55ecde83d9bb2045a22506a063ee7cb742fb72e836338fc08d8de3923ff2d2cdce458e
- SSDEEP 98304:pJM7gKGx7jJlEGvYklGL14Uc4RN/HMDPMZlv/fFJghXIwcBABn:pwGPfYklSBc4RN/HMDPMrvVJqYwcU
- TLSH T155767D9662F840D4D076D03DCE47851BE676BC10073287EF11A6A76A6F736D20E3AB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.